mod_http_oauth2: Enforce response type encoded in client_id The client promises to only use this response type, so we should hold them to that. This makes it fail earlier if the response type is disabled or the client is trying to use one that it promised not to use. Better than failing after login and consent.

This module discards typing notifications sent to a bare host JID,
preventing error replies to be sent. These errors are harmless but can
be annoying sometimes if your client shows them prominently.